Aug 23 07:03:29 prd-ubuntu20-04-docker-2c-8g-7464 passwd[647]: password for 'ubuntu' changed by 'root' Aug 23 07:03:29 prd-ubuntu20-04-docker-2c-8g-7464 sshd[732]: Server listening on 0.0.0.0 port 22. Aug 23 07:03:29 prd-ubuntu20-04-docker-2c-8g-7464 sshd[732]: Server listening on :: port 22. Aug 23 07:03:29 prd-ubuntu20-04-docker-2c-8g-7464 systemd-logind[684]: New seat seat0. Aug 23 07:03:29 prd-ubuntu20-04-docker-2c-8g-7464 systemd-logind[684]: Watching system buttons on /dev/input/event0 (Power Button) Aug 23 07:03:29 prd-ubuntu20-04-docker-2c-8g-7464 systemd-logind[684]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Aug 23 07:03:54 prd-ubuntu20-04-docker-2c-8g-7464 sshd[823]: error: kex_exchange_identification: Connection closed by remote host Aug 23 07:04:02 prd-ubuntu20-04-docker-2c-8g-7464 sshd[870]: Invalid user jenkins from 10.30.120.5 port 34330 Aug 23 07:04:02 prd-ubuntu20-04-docker-2c-8g-7464 sshd[870]: Received disconnect from 10.30.120.5 port 34330:11: Closed due to user request. [preauth] Aug 23 07:04:02 prd-ubuntu20-04-docker-2c-8g-7464 sshd[870]: Disconnected from invalid user jenkins 10.30.120.5 port 34330 [preauth] Aug 23 07:04:02 prd-ubuntu20-04-docker-2c-8g-7464 CRON[873]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 23 07:04:02 prd-ubuntu20-04-docker-2c-8g-7464 CRON[873]: pam_unix(cron:session): session closed for user root Aug 23 07:04:04 prd-ubuntu20-04-docker-2c-8g-7464 sshd[898]: Invalid user jenkins from 10.30.120.5 port 34334 Aug 23 07:04:04 prd-ubuntu20-04-docker-2c-8g-7464 sshd[898]: Received disconnect from 10.30.120.5 port 34334:11: Closed due to user request. [preauth] Aug 23 07:04:04 prd-ubuntu20-04-docker-2c-8g-7464 sshd[898]: Disconnected from invalid user jenkins 10.30.120.5 port 34334 [preauth] Aug 23 07:04:06 prd-ubuntu20-04-docker-2c-8g-7464 sshd[922]: Invalid user jenkins from 10.30.120.5 port 34336 Aug 23 07:04:06 prd-ubuntu20-04-docker-2c-8g-7464 sshd[922]: Received disconnect from 10.30.120.5 port 34336:11: Closed due to user request. [preauth] Aug 23 07:04:06 prd-ubuntu20-04-docker-2c-8g-7464 sshd[922]: Disconnected from invalid user jenkins 10.30.120.5 port 34336 [preauth] Aug 23 07:04:08 prd-ubuntu20-04-docker-2c-8g-7464 sshd[930]: Invalid user jenkins from 10.30.120.5 port 34338 Aug 23 07:04:08 prd-ubuntu20-04-docker-2c-8g-7464 sshd[930]: Received disconnect from 10.30.120.5 port 34338:11: Closed due to user request. [preauth] Aug 23 07:04:08 prd-ubuntu20-04-docker-2c-8g-7464 sshd[930]: Disconnected from invalid user jenkins 10.30.120.5 port 34338 [preauth] Aug 23 07:04:10 prd-ubuntu20-04-docker-2c-8g-7464 sshd[1066]: Invalid user jenkins from 10.30.120.5 port 34340 Aug 23 07:04:10 prd-ubuntu20-04-docker-2c-8g-7464 sshd[1066]: Received disconnect from 10.30.120.5 port 34340:11: Closed due to user request. [preauth] Aug 23 07:04:10 prd-ubuntu20-04-docker-2c-8g-7464 sshd[1066]: Disconnected from invalid user jenkins 10.30.120.5 port 34340 [preauth] Aug 23 07:04:12 prd-ubuntu20-04-docker-2c-8g-7464 sshd[1068]: Invalid user jenkins from 10.30.120.5 port 34342 Aug 23 07:04:13 prd-ubuntu20-04-docker-2c-8g-7464 sshd[1068]: Received disconnect from 10.30.120.5 port 34342:11: Closed due to user request. [preauth] Aug 23 07:04:13 prd-ubuntu20-04-docker-2c-8g-7464 sshd[1068]: Disconnected from invalid user jenkins 10.30.120.5 port 34342 [preauth] Aug 23 07:04:15 prd-ubuntu20-04-docker-2c-8g-7464 sshd[1199]: Invalid user jenkins from 10.30.120.5 port 34344 Aug 23 07:04:15 prd-ubuntu20-04-docker-2c-8g-7464 sshd[1199]: Received disconnect from 10.30.120.5 port 34344:11: Closed due to user request. [preauth] Aug 23 07:04:15 prd-ubuntu20-04-docker-2c-8g-7464 sshd[1199]: Disconnected from invalid user jenkins 10.30.120.5 port 34344 [preauth] Aug 23 07:04:17 prd-ubuntu20-04-docker-2c-8g-7464 sshd[1233]: Invalid user jenkins from 10.30.120.5 port 34346 Aug 23 07:04:17 prd-ubuntu20-04-docker-2c-8g-7464 sshd[1233]: Received disconnect from 10.30.120.5 port 34346:11: Closed due to user request. [preauth] Aug 23 07:04:17 prd-ubuntu20-04-docker-2c-8g-7464 sshd[1233]: Disconnected from invalid user jenkins 10.30.120.5 port 34346 [preauth] Aug 23 07:04:19 prd-ubuntu20-04-docker-2c-8g-7464 sshd[1466]: Invalid user jenkins from 10.30.120.5 port 34356 Aug 23 07:04:19 prd-ubuntu20-04-docker-2c-8g-7464 sshd[1466]: Received disconnect from 10.30.120.5 port 34356:11: Closed due to user request. [preauth] Aug 23 07:04:19 prd-ubuntu20-04-docker-2c-8g-7464 sshd[1466]: Disconnected from invalid user jenkins 10.30.120.5 port 34356 [preauth] Aug 23 07:04:21 prd-ubuntu20-04-docker-2c-8g-7464 sshd[1606]: Invalid user jenkins from 10.30.120.5 port 34358 Aug 23 07:04:21 prd-ubuntu20-04-docker-2c-8g-7464 sshd[1606]: Received disconnect from 10.30.120.5 port 34358:11: Closed due to user request. [preauth] Aug 23 07:04:21 prd-ubuntu20-04-docker-2c-8g-7464 sshd[1606]: Disconnected from invalid user jenkins 10.30.120.5 port 34358 [preauth] Aug 23 07:04:23 prd-ubuntu20-04-docker-2c-8g-7464 sshd[1649]: Invalid user jenkins from 10.30.120.5 port 34362 Aug 23 07:04:23 prd-ubuntu20-04-docker-2c-8g-7464 sshd[1649]: Received disconnect from 10.30.120.5 port 34362:11: Closed due to user request. [preauth] Aug 23 07:04:23 prd-ubuntu20-04-docker-2c-8g-7464 sshd[1649]: Disconnected from invalid user jenkins 10.30.120.5 port 34362 [preauth] Aug 23 07:04:24 prd-ubuntu20-04-docker-2c-8g-7464 useradd[1670]: new group: name=jenkins, GID=1001 Aug 23 07:04:24 prd-ubuntu20-04-docker-2c-8g-7464 useradd[1670]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Aug 23 07:04:25 prd-ubuntu20-04-docker-2c-8g-7464 usermod[1680]: add 'jenkins' to group 'docker' Aug 23 07:04:25 prd-ubuntu20-04-docker-2c-8g-7464 usermod[1680]: add 'jenkins' to shadow group 'docker' Aug 23 07:04:25 prd-ubuntu20-04-docker-2c-8g-7464 sshd[1702]: Accepted publickey for jenkins from 10.30.120.5 port 34364 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU Aug 23 07:04:25 prd-ubuntu20-04-docker-2c-8g-7464 sshd[1702]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Aug 23 07:04:25 prd-ubuntu20-04-docker-2c-8g-7464 systemd-logind[684]: New session 2 of user jenkins. Aug 23 07:04:25 prd-ubuntu20-04-docker-2c-8g-7464 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Aug 23 07:05:01 prd-ubuntu20-04-docker-2c-8g-7464 CRON[2885]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 23 07:05:01 prd-ubuntu20-04-docker-2c-8g-7464 CRON[2885]: pam_unix(cron:session): session closed for user root Aug 23 07:06:01 prd-ubuntu20-04-docker-2c-8g-7464 CRON[3280]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 23 07:06:01 prd-ubuntu20-04-docker-2c-8g-7464 CRON[3280]: pam_unix(cron:session): session closed for user root Aug 23 07:06:51 prd-ubuntu20-04-docker-2c-8g-7464 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ci-management-openstack-cron ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp Aug 23 07:06:51 prd-ubuntu20-04-docker-2c-8g-7464 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)